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ft 1 2 frfBft 1 ©*»ktHB* 2 o«HfcOIBn?«liB3il*fTV> 

, &m l a t utriBft i ^> i«f e* 2 3>r/yf-n mrn-t & 
ittriBft i <Dm%*iz, 

mum 2 s *tfc 7*-* *5Hr*-sft i <BS#«fc. 

ft 2 4>2HWtttt9§#*lfcSE"*" £ ft 1 ora#^SES|5 1 x 

ft i o@ t ft i ©«*«-*ffc tfeft i out ^i«tft*t * ft i om-zimsi&M t > 
»2 0BgHHtft*&«*flsu m^itvt^^m2<DmtLxm^ir^mi<om^t 

mmm i t nuiBft 2 tcggc? & * & &mm*ki&u t , 
v> x n^ffc l ft 1 ©ahhu avfvyf-^i, flriB##«o— as £ t mn^ 

y'y^mWi^M^X^ 1 ->j-'lfi£3=j£1-&ft l OBff^kWfc 
MEft 2 

miBft 1 <r>mk^r- * & ft 2 ©sugas t , 

friBft 1 mm £ tLfcT*- * *$«-r * ft 2 t . 

« 2 <&«tft 2 <Dm*i%-%-ikL?zmum 2 ©Bt-^btt aft 2 <*> 

ItrfBft 1 OBt^fca ^ r- > !X f - 9 U ft 1 Off 3 > t- > V 7- 9 £ Jfc# L 

[W*«2] 

ft2^Bf^b^>x>^7 :? -^ : £: ; ®^L. f2 0^3>r>7 

7*-^*3rj»u miBft2om-^='> / x>^ , 7*-^^LT, 

*20«SliS?>i:, «riB*^rfto-«*fett^»*fflv»r, MlBft2 oayr'/yf 
- * £ B£-5Hfc L fcfMBft 2 OBf-fr-ft 3 > T > y T- 9 b , MlB^M * fc t 

lUIBft 1 OBt^b^^mflBft 2 OUff^-ffcttli. ^*Mt^ * A Srfflv-T^-T 
[W^4] 

tm^M^Aff ^sa^ 1 o^tmiBft 2 ^og^^s^^miB^^t uxai 
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£ i- 2> 1 * & 3 tf> v*1* ft* l :® fc|B«tf>lf #iHt V* r A o 

[W#£6] _ _ _ . 

« 1 o«H»i:*2 <»^&$rx.> Wia^ 1 <o«St«TIB* 2 ©t»fco«-CftE*ttr^ 

jfci- & £ i ©i*4HIs»&j&« £ , 
£ 2 ©WHHfe**»&*s*fl:u *2©iitw*t4*i ©HWMMt-g-ttfc, 
miam i on t wi5£ 2 ©@ t'^o* § * £ * * 

£, 

mmm 1 <z>«#^7*- * s £ 2 <o;£«sb t > 

Htf 1 $ £ f - * £ 1" * £ 2 ©gfelft £ , 

Htria£ 1 2 <Dmw&&u&£. 

£, 

mum 1 ©& t utria^ 2 <vm \~&^ s *^«-r * nufa&wit&j» . 
*mm£-f2>mmm&m^x7-j* 0 

r/f>"; tr/f^ £#$Sf? * At x. > MIS 3 > x > ? 3H3«M? «TB > T 

y y mm t © tiEi «: tf l £ m v> -c wfflmm sf-s-m v * 

r a £ 3 3 y t y v %mtikW* 
m 1 o<&MHiiE^# t*103>f>7f-^ 3 £ 1 Of - 9 £ , 

ItriB 3 > x > y M«#^f- * 3 £ 1 . 

itrre 3 y t y v %mmm* bmmz **tz r- 9 z&m-t & n 1 <o^n £ . 

Htria^ y-ryy%:mm&fctt-t&m2 <D&Mmmwm*®.u-rz>% 1 <nmwmtkmn £ 

Kris* 1 «i £ mz& 2 <om § 3 £ , 

v^-cB&^bLfcus 1 <E>nt-^fb=» v?yv j ?-9 £. ■mm^m<o-uttzit^£mn^ 
* #^ t -r 3 3 y t y y ani*So 
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1 0 ] 

£#m k -r & 7Sfc» t»*« 8 mm<o avf^ ^«m 0 
1 1 1 

3 > x y y mm%k%* t=t>v-yy , twraa 3 > r- > ? &mm%s- 1 m e 3 > t- 

r A 1:* It 5 3 v f > 7 Siifcab ^ t , 

ma mmm^r- 9 * mm-r & is 2 <Dmmm t > 

stria a > r- > y s# $ tt^s 1 ©«hhis 3>f> 7 f - * *«-3"fb u n 

tiff)- «SSrt:tt^»i:fcfjv>? 5/jL|SH![^v»T*2 0Ay S"afl[*^JftU £ 1 
y V a« fc JfcRt * * 1 i: x. 4 i 

imm 1 2 1 

1 3 ] 

1 4 ] 

t ffl ^ T Wit L^y'/a « «r «ria*^r«i tutu^t^-t 

n»*^ 1 5 1 

£ 1 <omtm 2 4>tt4l*tt;U 1»fB$ 1 o^kmiB^ 2 o«»k <0Mt?ftfiBS&«rff 
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•ft, 

m 2 (Dm^mfrh&^KL, m. j %it^m$k*%2 <omt Lxmui-zm i <D^^t 
y 'y^m^m^rm i i onf-int*?- y ^miam i ©a 

ffllB£ 2 (7?<2rM«^# tfHB& 2 © a > x > V T ~ 9 *m&1r 4*2©f-^««^ 

m2<Dmtm2<Dm* m-^it l «r fan 2 o £ & $1- & is 2 <o nr^ * 

Iff f B*« * *Mfl * Iff! B*#«M&tt TsT-y-ft, 
y 2/ a M & * ffi v»T »^ ~> * & * b , ftTlBft l^r>a«i Jfctfc"*" & $ 1 <r> 

v&itx r^i * fine* 2 *>«#fcnff Hiifc 

« i: ttMEfctt^ ? » Tig 3 O/n * v- a-BLSr^tfli U 14^9 -> afflt t 

•r * n 2 oy&itx t ? 

- * £ Hff-^-fb L fcltrSB* 2 © Bf^k 3>fV97»-*i:, WfB^H O-U i tz 1±&U £ 

[f§3^3K 17] 
& i £l 
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«rtB*^«©-»*fett^»*fflv>-c. Aria* 1 <*>3 ^ vv?-9 z&mmm^zm 
v> r uf -wb u * * 1 ©hhhi: 3^f>7f-n, «hb##*©-« t tz t mn^ 
y i/z-m&zm^rn 1 <o^y 1 (d^h^t-v ybz^yryym 

19] 

y y 1 omxmmm * t tzm *m ^ x m-^itmm *ft ? ~> * 

T&\z&v%*y7-yy%m^xmft-$M7vr7^x$>^x, 

m2<D&mmuw^tm2<v^y7-yyT-?*femi-&%2<»7-?&fflX7-v7t 
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[S&9!<0£1M St^fif'>^fA, BBEtt**"?'*^** 3>f^7gfe«#, 
[0 0 0 1 ] 

[»*«*] 

[0 0 0 2] 

is#, *M*fl:»Fq> murmeft arowe* *^LfcM**T 

S><Z>T&£o mTfi^ AVffi8P5±* I EEE 1 3 9 4 TMBBLfc*: * 
DTCP (Digital Transmission Content^Pro 
t e c t i o n) fcP?»**L*^««Km»^*5fe$^"C^&BfEtt***fe*7p:Lrv» 

* WHfcfclR 1 #B) o to^tfett, Btt*AK*nDSAt*tffl^f tvvi; ■ 
^tfv^BSE, »nDSA**RWHIRDH«*#C-3V»-c»i, #4«M:B2;OTffLv»o 

[0 0 0 3] 

(f£*flli :BiEft##) 
£JLT"e«fl£*fl 1 ^**BK*##:friic©»ffi*3H"o aT«llEi*t*St-liJ.- 
f A t B fcOW-CiEBKRVftSttff ^ . A-if AI±&PMWEW*C e r t_ 

Afc**Lfc*tJ©-*-*»»*KS ARtf*:x*&H*KPC*fl9*i-*o ^-ifBlt&m^ 

[0 0 0 4] 

Xf«^S20 1 : a— *f B*4i1% x.~*fAK&M(D$;ffimmwmC e r t_Btf 
tl/>^f-^cBeSo iit, Cert_Bli, B^HiK P B t 
«SCB = S i g (KSC, KPB) -e&&o £fC, S i g (KSC, KPB) 

* Mil K S C £ ffl v> TffoS U £<2rggH K P B fc*f"t * 7* - * "C* £ . 

[0 0 0 5] 

^t^v/T'S 2 0 2: ^fcHJ.— if AJ4. C e r t_B, cBttilU C e r t_BK-g- 
I tLS&iiK P B t ^ S C B L t , -tv^&iiiKPC^v^, f^SC 
B^H^KPBlc^-r^IELv^-bV^^'e^^^^^SE-r^o -£-?>£§:^ JEL^-tv 
**£T?fc»tfr»«&g*«rr$**o jEtv>-fe'/^f*t**ilf> %.<DXr-v7S 2 0 3 

[0 0 0 6] 

Xr^S 2 0 3 : a— ' 9* A 14, S*<&^B8ttfiE9!#C e r t _A t V> a JT- * 
c A*.*— rBCSSflM-fco Cert_At4, A69<2rPliiK PAtfO-tV^f 

£SCA=S i g (KSC, KPA) Ir&^o 
[0 0 0 7] 

7f ^S 2 0 4 : J--4?Bte, C e r t_A, c A&MU C e r t_AK<£4*L 
4^B!ttKPBi:^f*SCAi:JtU, * > ^<&PIMK P C *J8 v>T, f^SCA* s 
/^HiKP B^i-^jELv^^^^-e^^^^^mE-r^o JEL^-tv** 

tfo 

[0 0 0 8] 

Olfik A*G£H-3£i-£o iit, Gf4, «9 , k A* Gl4*&Rffl&-t<P.£G 
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[0 0 0 9] 

Xf^S 2 0 6 I a— 9* Afi, cBtkA*GOl^(^Lt, MKSASrfflV^ 
T, f^SA=S i g (K S A, cB I I k A * G) Srfi^-r&o x I I y & x 

[0 0 10] 

7 7'S 2 0 7 :a-fAlt cB, kA*GWSA*3-—*?BKmm-?& 0 
[0 0 11] 

^f?^S 2 0 8 :a-fBtt, cB, k A*GWS A^iU a— ifAO&Htt 
KP A£fflv>T, ^£S At&*c B k A * G <D&BK#1r aiELv^^-Cfc* J^tEi"* 
o IEL< &*t*Ltf, ^fA^TH^o ftLMtt^^ry 2 0 9--iitro 
[0 0 12] 

Xr^S 2 0 9 : jx— f Bfi> SL&k B £3&££*> ffiRDHM^co^ 17x-X 
tfMfik B * G^tl-^l-'&o 
[0 0 13] 

Zf^S210: ^■-•9 I Bii> c Afc k B * GO^tcttLT, $&MKSB£fflV> 
T, f^SB=S i g (KSB, cA I I k B * G) Sr^tSo 
[0 0 14] 

^f^S2 1i:a-fBli, cA, kB*G^SB^-fACMt&o 
[0 0 15] 

7f'^S2 12 :a-fAtt, cA, kB*GWSB«U a— ^fBO<&M» 
KPB 5£ SB* s cAikB* G<D&$£fctt-$- £jELv>^£Tr&;z>;M&§iEi-& 

o IE L < &tf*U;T, ^r-A^TS-^&o f^MW^T7^S2 1 3^iit> 0 
[0 0 16] 

7f*;^S 2 1 3 I JL- J fBte, kA*GikB?:fflv>T, kB* ( k A * G) fcfrlt 
[0 0 17] 

7f 7^S2 14 : i-fAli, kB*G£ kASrffi^T, kA* ( k B * G) SrfrU 
[0 0 18] 

%mw* r&^&mw] twjz 0 mwrnwizmmi-zEc i Es^ta, a *G 

i: b * Gfrh. a * (b*G) £*#>£D iffie-Hellma nFp^^nWtL&F^ 

[^Mftr^tfflt 1] DTCP Specification <£>W hi te paper 
<URL : h t t p : //www. d t c p . c o m/ spec, h t m 1 > 
[^tf2] IWjffiii, tU*1**, " ^ftBt-f-" > 0mH# ( 1 9 9 7^) 

3 ] V i c t o r Shoup, "A proposal for 
an ISO standard for public key' encrypt 
ion (version 2.1)'*, [online], 2001^12^20 
EU [2 0 0 2*9J! 2 9 Hfc*] , -r>*-** KURL : h t t p : // s 

houp. net/papers/iso — 2 1. pdf> 

[3¥&f?XM. 4] Tatsuaki Okamoto, "Generic con 
versions for constructing IND-CCA2 pub 
lie — key encryption in the random oracl 
e model", [online]. The 5th Workshop on 
Elliptic Curve Cryptography (ECC 2001), 

ffliiE# 2004-3104743 
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2 0 0 1^10^ 3 00, [2 0 0 2^9129 Btfe5ft] ^ r/M?KURL 
I h t t p : //www. cacr. math, uwaterloo. ca/co 
nferences/2001/ecc/okamoto. ppt> 

[i#ra5] Neal Koblitz, "Algebraic Aspec 
ts of Cryptography", Algorithms and Co 
mputation in Mathematics Vol. 3, pp. 132 
-133, Springer-Verlag, 1998. 

[^#ff*Dt6l M. Bellare and P. Rogaway, "Mi 
nimizing the use of random oraclesin a 
uthenticated encryption schemes. In Pr 
oceedings of PKS' 9 7, 1 9 9 7. 

[0 0 19] 

[0 0 2 0] _ 
[0 0 2 1] 

cut i $ i ^bhmew* * i <d n > x > y r- 9 *&m~? 2>mi<OT-* 

i2©«i*^fftt, aHHtbfc*t***2c&«fcLTffi:&***l«>llff 

^ b«a#« £ . «riBis i on fc mien 2 <om § * *k$u-r a t 
ioa>fV7f-^t *a^Bt-^ * m ^ x m-^it l ten in ur^t 3 > <? > v r- * 1 

f>^f-^^t&lini20f-^ fetttt k . TlfflB* 1 0«^t'- * & * 2 

<7>3Hi£|Sk. «rBilio«»*»6,afl|$*Lfcr-^*ft«i-*»2©M«k, ItfsBJM 

m2 <Dm^mz4Lj&-f2>i$2 <Dm^m*kj&U£, mm 1 ©w-s-Mfrfea-s-ftu 
a-JHfc Lfctt**tna* i«ituiiiwi2 ^ie^k»a-^« t . «rsa* 1 

^-**JR»U 1trSB#l^a-^3>"r>'^7*-^^tr, IWB*«0-«4fctt^ 
I 0 0 2 2 ] ^ 

. tfriB#«<&-»4 ktMBftffr^ ? i'aHSttl^t* 3 O^ v ->*a*^« 

L i5 4 0^y">*ai:Jfctlti-**2oa-f"fk«*#^ *2*>«#»i$e>fc. Ttftifi** 
fti> - « f £ fli v> T\ « SB* 2©3>f>?f-^t L fcflfSB* 2©*f 
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4 O^n y v Sr & ft 2 OBff ^"fk«P tr i t «r #m t "t & o 
[0 0 2 3] 

M#£ 3 fc*5»t*S&9Jtt, litriBft 1 ©Bff^HMfcRtftfriBft 2 OHf-SHb^fi, 7*)V 
[0 0 2 4] 

[0 0 2 5] 
[0 0 2 6] 

M6Ci3ttS^li, *lo«SI:*2oa»m, TiufBft l 2 
o«#k©lffl-efilE3SS:ff^BiiE«**V^^A-eaboT. tfflBft 1 ft 1 

HHIiEHJ# fc^i^)Dyf>7f-^ fc*&*fl-r * ft 1 <OT- * &®M t , UtrfBft 2 
^7*-**3£«1-&ft lOjMWfc, ^ft 2 <&«»*&m#Sit;fc7*- ft 

-x&zm^rm i (omtm 1 ottfcigwtLfcft 1 ©m-s-flsfc 1 oBt-f-fb 

(7) 3 > r- > y t*- * trnti-t* m2<Dr-? &mu t s ttrtBft 1 v>m&^r- * zmm-r 
fan i (DtefflMmmmztkmir a ft 2 <Dmww&wm t , m2<Dmtm2<Dm* im t 

ttU «TIBftl<&ft*ffi#i-*ft2©M#ft*ra^»^ «riBftltf>«fc1iriB«2©ftfc 
[0 0 2 7] 

x > ? Min t mib 3 > f- > v t <d mx-m&t *ft v>, l £ -c ng 
•f-'fkafli * # d ehs-m ~> * r- a n ^5 &t s =1 > r- ^ y usst* ot.ii E 

#^7*- * * shs* & ft 1 <ommm> 2: > ^ria 3 y t > v am s * * 

Mi" £ * 1 <0^mm t , miB 3Vf>? S^^S ^^-r ^» « 2 <0<2r^^iEB^#*»1- 
dlH 1 <^liE^#^liE^t , «**M^kLfc# 1 oM-9"fbM*fe*i-*M 

1 <d m^itm^U t , ttria 3 > x ^7 ibMffl$tLSi2o nsp -f-f b» * m-^-fb 

&^tLJz$£%:*m2<Dmt LTBJAt**l©Htfl:ttaf»i: < «riB#l*>ttfc 

ittajfc. «riB#jfiftto— «p*3t»±^B*fflv>T, «rfB*i©3>7 L ^^7*-^**a«iBi 

[0 0 2 8] 

MM8K*»ta»wttH mum i ftmit, i*^Mc^-XA^v^± 

[0 0 2 9] 
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[0 0 3 0] 

oK&vzftwi*, mmmmikj&wte. mmmi<vmtmm%2<Dm*Ky 

[0 0 3 1] 

ff^Sl U-^lt^^fi^ n > f > ^ >f > mm* 

> x > v t mm wt> v t <o m -em&m * tf &%vizm*m^r 

f®-§HbiI« ^fi 1 d Brt®#v* x a Kis * a > r- y y &mn&x$> ot, IP 2 o<&M 

* * a * 2 <® «* t , una 3 y f * y mmmm* h&m$frfcr-f 
*%m-tzm2 <D&mwt, mm* *7>y&mm&K&t*mm i 

^iti2©i k »o- § £##t * fejft-j- * xmm&titM t . «rsa#*r*i * fern -r & 
fcmm t , mm => > t > ? e>aMi s 1 <om^t * v t > ? r-?*®.^ 

fbu m<DG&x>7->yT-?*Wfri'> mmmKo^^yTyyr-^izMVx 

> mm^m<o~mt tia&mtmtt* ? i/^m^m^xm 2 <^ * ~> * -fit fc^isu 
31 1 <z>/n * v t ikSc-r & a* 1 vm^itu t *m*. & - 1 zmm. t -rz „ 

[0 0 3 2] 
[0 0 3 3] 

3fc*»t*$&91*±* l&®^10^^WIB^2 0^0M 
[0 0 3 4] 

W*:gl 4fc*tt*»Wtt. iWIWti, T»e#10«fctttB*2 0ft*li3' 
[0 0 3 5] 

5fc**t*»W*i, *l 2 ©EMS***.. tfflB»l tfTCB* 

2 o«»k<?5iBiT?«K3i*fir^ % u^tt*fflv>-c«raa» 1 <bflrsa# 2 

^>^r'-^*«iW-r*«f l^f-^tttt^^f^^- Titian 2 <Z>»^7*-*£SiMrr 
r^t, ^2 0<&MliE^#^^iEt-4^10|iE§g#^iE^T-^7 p k, f 

yt, mm&ivmtm&m2<Dm'&<s%&Gmz&j&i-z&%m&j&XTy-7t, m 
m%mm*&m-tz&mmte®x7-v7t, mm&mmo-uttzte^uzm^x, mm 

&i<DWrvyr-*i &mmm # * ffl v> -c et-^-fb l » 1 ^ Bt-t'fb 3>7"/7f-^ 

& is i (om-^it^T y yt immm 1 t&iB^ 2 o^@ra#k taia 

9 zmm-r 4^2 v-yft^ mmm 1 ^> ant $ f - ^ ^> » 

^2<7?itk^2wa^ Bt-^<k t tz mmm 2 <^ * ^js-t 4^20 Ht-t^^^^^ x 
y?t, mmmi<o^^m^hm^tL, m^tLtz^Mimmmi^mtvxmti-r 
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I 0 0 3 6 ] ^ „^ 

|5U ^4^^7~>^-'fili:Jtl^-r*^2^Wfb^7 : -y -/^^^ *2 0«#l4Se»_^ 
ATE t tz \i£r%$ £ ffl V- X . 1MB£ 2 O n ^ x > ^ 7*- * £ Bf-^-fb L fctffBfi# 

2 ongf^fca y^yyr-? mm&mmv-u* tztt&atmtt^ ^^»fflv> 

"CHUB* 4 S/3.«*&Jft-r*» 2 <D$t^rftx?v t £#mi1-&o 

[0 0 3 7] 

[0 0 3 8] 

yf>7 i: WR 3 > t- > y k ^ WCftlES Sr^f L tzM *M v> T 
WW fc»B £ fr d WF^afll a s * t * K £ £ = > r > ? 3SMg«» -C*ff 3 tt £ :/ n if y A 

mm^y^yy^mm^r-^^mm-r^nKomm^-ryft^ 
■r y y gmmm* * mm $ titz r- 9 * g-ft-r * m 1 o^-ftr* 7 ? -t t , m e =» > -r > ? 

am * * *;t#t&$; AT??*., mm&^m * mi -t %> &%mfam x-rvft* 
mm * fc * ffl ^ ^ * ime* ioa^7f-n Aa^Ht^- * m v> 

TBf^b L fc* 1 OBTiHfc avf'/yf-^t, «HB##tt<*>— « f tz \±&U t mtt'^ * 
ft& £ * & - 1 £ t i~ * o 

[0 0 3 9] 

> r > ^ fc «r is 3 > r- > y $flt«i» m -emmm * ff a* l ^« * ffl v> t 

IB^ 1 Oft fc LT ffilJi- S * 2 <OBff-?-ffctt«-e-^ "ft. 1irfBf& 1 t mifiH 2 <7>ft 
tc^o- § A>ta * &J£1- S *M^«^ 7-yft, tfTEAM «: ftffl-T * *t ^^ffl ^ ^ 

^ri, miea'/f > ^ »««*3&» ^> mm $ 1 oie^b ayf^f-* 

ml5A^^-^^^ti^^fl^^i5^^ N ^" >i M^^ffiv^T^2^^^^^^^^^L 

. mum 1 -yyaffii itn-r * 1 vmt* f?^t3>T>9 ^*tr 

o 
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[3&W 

[0 0 4 1] 
[0 0 4 2] 

*&mKfrfr&m&<wm i L-cctti^^fA i o o o ico^t^tso 

[0 0 4 3] . , 

hi i±. %m<oimi K&wzm-^mm'sATJ* i o oo©mws^^o *v 

XfAl^ «»A 110 0, m&B 1 2 0 OfrbmJ&ZfrZo 
[0 0 4 4] 

<«A1 10 0«> m „ 
KA 1 1 0 0J4, 7"- * * 7*- 1 10U> y'-^^^Si-^^ 

»H02t, 103J:, fEBJ#£^liE^&ra#^iEI?& 1 1 0 

4 fc, *flf«KSA*»«-f*»«iMMfl«8i i o 5 1> m*im*&&'r*wwM&- 

J&SB 1 1 0 6 fc, B»-^k««ra^a«f^b«ia#« 1107^ 

^t-rste-^msM 1 1 ot. 3^7 t ^^r r -^«ra^ki-*a-^kspi 1 1 1 t^m^ 

[0 0 4 5] . 

f-^Wl 1 0 1(4. fEIJMfCe r t_A, * > *^£&IE&K P C&tfn >7- ✓ 
7f-^DA*«j*t4, iif, Cer t_Ali«KPAi:W>^f^SKP 
A=S i g (KSC, KP A) *ibfc&o C e r t_Afctef- I Dffi 

«W*&**LT<I> J:v»U "t^mSKPA^KP A t -fifeO - ^ . I Dlt^t 

Sig (KSC, KPA) li*>^f^j£ftKSC«:fflv>fcKPAO 
f*ttflct5. SEBj?#Ce r t _A£U f -fe > **£#SE«K P C 14. ^*iEK# 

»*, »RDSA**-C**o f^Mtov^ii, »il2^L^ 0 
[0 0 4 6] 

m^i i o 2 (4, m&B 1 2 o o^r-tzi&m-t&o 

[0 0 4 7] 

£#SB1 1 0 3 54. MB 1 2 0 0 ^fcj&RSftfcT*- * £^t1-*o 
[0 0 4 8] „, _ _ 

«E9l#lftBESBl 1 0 4(4. MB 1 2 0 0 <0<2rK^K P B <£>ra#C e r t_Bi:^l 
tttV^&iiKPBtWV^f^SKPB^U 1 0 lKltttt* 

*L«CV»a-fe>^**«ME«KPC*fflV»T, *>**£SKPB*^HJftKPB0>IELV> 

[0 0 4 9] 

»**MHfi»l 1 0 5t4. «iKSA*«MtS 0 

Bt-I^i^jk® 1 1 0 654. iKAt-!-<OP|f1kiKEMA*W^o i^^KAS. 
tm^bIKEMAii> ^BB^I^O-ffi-e^Sli^^Mk^*-^^ (Key En 
capsulation Mechanisms) tmf fL2>tt*m^XftJ&-t &o M 

v^Tf4, MAI 1 0 Ort<0*W<B&W«:Lfc&-e#L<jfc<<4o 

1 0 7f4, MB 1 2 0 0 J:9S£«$tt*l«^^kftKEMB*«^k 

tb!E# 2004-3104743 



Sfrm 2003-356073 



8/ 



£*ft£jftff 1 10 814, ^KAfctf^KBi*), *iiWii**«KS^?Va 
#**4iW«l 10 9(4, *SftffiF^ffl**«IKSfc^y>*ffl*^«IKH*»tt-ta 

o 

**|feU Enc (KS, DA) *fft*U ^»V»fl*ttKHMv»t, ^I^if 
Hash (KH, DA) . iit, Enc (KS, DA) f4g!K S *ffiv>T D A 
M-C«f^fbUfc«F-9-*T?*5^ Hash (KH, DA) J4^KH£fflV>-C, ftfsh" v *> 
aH«Ct?tHJLfcDA<0^^>*#**l*^*« *aft«tli«^.tfDES^AES 
Hash (KH, DA) 14, Hash (KH, DA) =SHA1 (K 
HI IDA) JiUUK SHA1 (x) *4, xOSHAl^y v*H«MTC 

[0 0 5 5] 

f-^flHHfcffil 1 1 1 f4, 3 , /f'/7f-i'DB©»tXCDB = Enc (KS, D 
B) £«-5HfcLT, f-^DB' *JR#U f-*DB' ©^r> itHDB' = Has 
h (KH, DB' ) fcttJfU HDBfcJfctM-&o 
[0 0 5 6] 

(&#■/■£ Mb;* *-^) 

[0 0 5 9] 

tv^P SEC-KEMT/l'^y^AKov^TRWtSo 
[0 0 6 0] 

(1) PSEC-KEMO^f 

PSEC-KEMI4, &Tf0>i'XTA'i?J*~-9*&<2o 
[0 0 6 1] 

•^Rffl^: e 
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• »RlW±«nW* : P 
[0 0 6 2] 

(2) PSEC-KEMO&Blftk»*ft 

• jy*r&\'Z nCSSxiSff, W=x *P*^K+*« 

CC^fzntt, 10, 1 n-l| x*Ptf, WRffi 

[0 0 6 4] 

• -2rfMp k£ (E, P, W, n) kU s k^xht^o 
[0 0 6 5] 

(3) P SEC-KEM^Hf-^fb 
[0 0 6 6] 

• Z nOSIst^'/ACtlStSo 

. [ G°(S) 7 *«U G (s) £G (s) =al iKt^tS.:^ I I ttlf* 
Mfrfr**L, G (s) £G (s) =al |Kt&flt4fc^ G (s) <D±fflm*v 

[0 0 6 8] 

.R= a *P, Q= a *W*&Jfci _ &o 

.^s^xor H (R I I Q) *&JS-r*o --^> x o r ttUMfcWM»*#* 
[0 0 7 0] 

•*t!Ki^XC= (R, v) «:ffiM5o 
[0 0 7 1] 

(4) P S EC-KEMc^m-i-fb 

J^TCl^S 7 J^V K e mD t^tC = (R, v) 

[0 0 7 2] 

• Q= x * R^^-t^o 
[0 0 7 3] 

• s ' =v xor H (R I I Q) *4)St4. 
[0 0 7 4] 

• G (s' ) Sr&JjfcU G(s , )*G(s')=all Ki^fit*. 

. [ r=I *p a* £3**-** jfcai-fura^rttKfcffl^-f *• 

[0 0 7 6] ^ _ . ^ 

t^fAi^iu:!^ t-r. ii^fttt^iipk*i#u 

flMfLfc&M p k ZKH&O&mmm^rikT >v X A K e mE LT*tiK fc W 

ttC**liJL-C, l««C*S«M^«i-4o ^tt, ^ 
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[0 0 7 7] 
[0 0 7 8] 

^ PSEC-KEM7;V^'J^li, Ar^aRRHOA** (a*P I I a *W) 

*P I I a*W) ©Mi$^v*4)StJo ^LT, «If7;V^VXAKe 
mD"C»i, R=a*P^t,Wsk (=x) tfflv^TQ = x * R = x * (a*P) =a 
* (x* P) =a *Wt#feSih!i s t^WT% v xor H(a*Plla*W) 

ftUfs^Wi^-eiSc f£ot\ MHfib7;v^ , JXAKemE t^mmm 

[0 0 7 9] 

4SiLfcfcU^«f»sk (=x) ^e>4v^-eR=a*P^?>Q=a*W (= 
(ax) *P) *ttjr?§1% m«^«75 s #ffiL/c^Ot|WI^*«K=lr»m-C'§'5:V^ 

ttithiz. mmms k*»e>fcHfe<o3#«*«u «p kL^i^i4v>©-e, 

±ffiQ<Dtt#fctt»*»s k (=x) Oft*? >9 K2=mm.V k<OW= x * P S^Uffl-fS^ t 
Cfti*t % —m~, a * P tW= x * Prt^ Q=a*W (= (ax) *P) £^tf>&£ 
fctt, *tRffl^-t^D if f ie-Hellma nKStPftftL, a * x <D>ffi^»] 5» 

-t^ls 0 P SEC-KEM7A'tf , JXAI4, f&$ftfrffl v>-f K a * P *> a *W£ft 
IfSii:«!S;Di f f ie-Hel lman»ffl^ *afcfl&K#*T«K«r# 

[0 0 8 2] 

±E©PSEC-KEM7^rf'jXAtt, ft^^R*t±©D i f f i e-He 
1 1 ma nmm&mm-e&tU^ »*«*»e,4:V^flH61ltt***K*#*£fc**^* 

3c£ttIE9§J tP^^o PSEC-KEM?)f©KEM7;V^XA, $)x.i£R S A-KE 
[0 0 8 3] 

<MB12 0©«> ^-^^/a 

«b 1 2 o oti> 2oit, 7--rz&mirz>Mm 

»1 2 0 2 t, 2 0 3 t> §El^*£^lE^*aEW**fcIE££l 2 0 

4 fc, «KSBMt^»Ml 2 0 5 fc> B(F^flS«<r^*-r««P*ffc«l^ 
jt«1 2 0 6 k, BS-t^fil*«*i-*l«^k««^«l 2 0 7 t. ***«r^ft-t*** 
ft&Attl 2 0 8 **«t«tt-t-4**««««l 2 0 9fc, 3>f'/?f-ni 
^-fk-rSBff^fc«Sl 2 1 0t> *>T*yT-**W*4t't&1S&imi 2 1 1 

2 0 ltt. <&§§&KPB. -e^liE^*C e r t_B, -fey^**«lE«l 
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KPCS^Vf>7f-^DBW5. ft*, SEBJ#C e r t_B25.y f -b>'^^ 
[0 0 8 5] 

mmUl 2 0 2lt 4»A 1 1 0 0^7*-*£SiMl1-&o 
[0 0 8 6] 

^gSRl 2 0 3B, tt#A 1 1 0 0 3*»e>S4fir$tLfef*-^«rS«-r&« 
[0 0 8 7] 

M^iEgU 2 0 4 W\ ttttB 1 1 0 0 <£><2rM^K P A WSE^*C e r t_AK&* 
#itv»*^BIttKPAtW5'^t*SKPA»:ttU 7*-*»itt*Bl 2 0 1 fctefflS 
*LTV>a*>****WE*KPC*JHVvr, *y^f*SKPA4 t &WKPAO]Etv» 

[0 0 8 8] 

fMMMMAffl 2 0 5 f±> MIKSBlttCMt^o 

to 0 8 9 J _ 

l£HHtft&j£«l 2 0 6ti, ttKBfc-C-WBSf-S-'fkftKEMBt^-rSo ^^KBl 

U»Ht«KEMBii. imi&Affl 1 0 6 H«U ft* ^-teMfc* fcfflv* 
[0 0 9 0] 

2 0 71^ «HSA1 1 0 Ofph:&mZtL&&%ri\MKEMA*ia.Wt 

V>Tff ? o 
[0 0 9 1] 

#*ft£A«B 1 2 0 8 it, iKAS^lKBiD, *a«l»^***K S fc^*** 

fttt, JIKAi: KBOMJO-Wtfctt^OffiW S, KH it* i> <DX-&tiit 
[0 0 9 2] 

#M«MA«1 2 0 9 HU *ai«*ffl**iK S i/affl***KH t««t* 
[0 0 9 3] 

7-9ViWmi 2 1 0 14, 3>fV7f-^DB^ #MI«#/fl##ftK S fc/Bv* 
THHHtU Enc (KS, DB) fcffcfcU ^r>*WiKH*fflV>T, ^yv^ 
ftHash (KH, DB) 0 Enc (KS, DB) liiKS^fflV^DA^i 

mm^m^ithtz^X^^)^ Hash (KH, DB) {4MKH£fflV*T, mft"? 

v =>. mmxnn uDB©^r>at* at*-*- & » *a«ne-f-»±« wr d e s m^r*? a e 

SBT»T?**o Hash (KH, DB) 14, Hash (KH, DB) =SHA1 ( 

KH I I DB) t LtUv\ 
[0 0 9 4] 

«f-(b»12 11tt, 3>f^7f-^DA©HftCDA = Enc (KS, DA) £ 
flHHfcLT, f-^DA' £HX#U f-^DA' ^r>a|HDA' =Hash (K 
H, DA' ) fctWU KDAtit&ir 2> a 
[0 0 9 5] 

<8|fM'>^fA 1 0 0<DiM^> 

Hf-WW^*^ *iS£A 110 0 £&&B 1 2 0 0 k*»«SlBBE*trV^ 

*ffofcm> #*rLfctt*fflVvt«#Al 1 0fc«ffB 1 2 0^t3VfV?f-n 
S&BL^do iit, a>f>7f-* tit, flliclf, mbf-^ #*7*-*. ffl 

[0 0 9 6] 
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Xry/S 1 0 1 :«»B 1 2 0 0rt©iiHg«l 2 0 2IJ, 201Kft 
jW3*L"CV**, liE93#C e r t_B£, MAI 1 0 OKSit*. 

[0 0 9 7] „ . ^ _ 

*TvfS 1 0 2 :«HA1 1 0 0rt<&£««l 1 0 3Ji> iEBJ#C e r t_B££<fI 

[0 0 9 8] 

1 0 3 :«»A1 1 0 Ort<D|iEg§*^IE^l 1 0 4 14. CT#C e r t_B 
[0 0 9 9] 

Xfy^S 1 0 4 : MA 1 1 0 Ort©l«HHfc*Safc«l l 0 6(4. IKAtiifK 
EMAMt^o 

i^-iys 105: «a 1 i o opwmmui i o 2 {4, r-rfeto&i loitft 

j|flS*i/CV>S, 2r§i§&KP AS.^OfE^#C e r t_Afc. fHWRKEMAtSSB 1 
2 0 O^W-t^o 

iJ^Sl06 :«B 1 2 00^fil 2 0 3li> «KPA, ^OfiE^# 
C e r t_AhlMKEMA*$it^o 
[0 10 2] 

^f^S107 '.MB 1 2 0 0rtOfEBJ!«fctiES!$l 2 0 414. iEHJ5*C e r t_A 
fc*4 tLSMK P AXtf**)** SKPACJtU, f*SKP A**&H«K P AO 
jELv»-fc>**£-e*3*§**. -f-^»j|fl«l 2 0 1 MMftSivrvia-fe^&Wia 

Lv>-fe^^*iSO»#t4. Wr^yS 1 0 8^5ttPo 
[0 10 3] 

A r^S108: MB 1 2 0 0 1 2 0 7 (4. 1 2 

0 5 4 »)»*ttKSB*JM§U S«iKSB*fflV»-C> iffiiKEMAi *K ^KA£ 

?s\ 0 9 I MB 1 2 0 0flO«ff^MI4«»l 2 0 6 it, itKBiitlf^K 
EMBMtSo 

s\ 1 0 :MB 1 2 0 OPwmmUl 2 0 2 (4. iMKEMB*«Al 

1 o o^5t#i-^>o 

[0 10 7] 

^^S112:W110 ofioWfl«a*»i 1 0 714, »ffft«MA«l 1 o 
5J:9%fiKSAmU «iKSB$:fflv>t, Hffi^KEMB4t9\ iKB$:f 

1 1 3 :MB 1 2 0 0flO#«£j»l 2 0 814, HKBi:«ftfci 

1 209 e»it*. 

i^i^sl 1 4 :«SA1 1 0 0rtO*«^JS«l 1 0 814. IKAt«tt^i 
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*&%mfeMU 110 9 Kteffi-t&o 
[0 1 1 01 

Xf^S115: MA 1 1 0 0I*JOB#-5HtS|5 1 1 1 0 14, T-*mmi 10 11: 

i^J^S 116: «»A 1 1 0 OftOSHIWl 1 0 2 (4, Bff^ffcav^^TWC. 
DAi^'; S/attHDAtftSB 1 2 0 O^Mt^o 
[0 112] 

^r^S 1 1 7 :MB 1 2 0 0l*JOSHilH$l 2 0 3 »i, WHMta >x >yf- * C 
DA^-SitS, 
[0 113] 

7f7yS 1 1 8 :MB 1 2 OOfiOtWl 2 1 1 li> «ffta>fy7f-* 
CDA*atUif3>f^7f-^DA' *Tm-tZ>o *b\zft$rttMl 2 11li, 
9 >>al^tiKH £J8 V^T, If3Vf>7f-^DA » * VafcH D A ' 
fcftltU HDAfcit^ci-^>o HDA + HDA' t?*tL(£, V^rA &i&T£«o *ti 
&&\±V&xVT>yT-9W *7*-9&®Ml 2 0 1 Cfeit^o 
[0 114] 

^r^S119: MB 1 2 0 0 flOffiHHfcffi 1 2 10IJ, 7*-**&«l 2 0 IK 
[0 115] _ 

^fyys i 2 o :mb i 2 o ortoangasi 2 0 2l±, P|t<k3>T>yf-^C 

DBfcA9'>aiHDBt«SA 110 O^M-H-r^o 
[0 116] 

7fyys 1 2 1 :«SA1 1 0 0flo$«91 1 0 3 Ji> (ffftaVrVyf-i'C 
[0 117] 

^fyysi2 2 :tt#A i i o orto«#<k«i l i i«> BF-^fkav^vy-f-^ 

CDB&«-§-L-cm-5§-= r ^>y7*-*DB* Sriflt^T&o * M"9"fk«S 1 1 1 1 »*> 
ft^^>ai*tftKHtlv»t, ^3>r>7f-^DB' o^r>*tHDB' 
fctHtU HDBfcJ£J&1-£o HDB + HDB' T?**U*, i/^fA*|7H«. 
&>ft\iV&* > T > V 9 DB' 4r7*-^»iW*95 1 1 0 1 £*MflU #Ti"&o 
[0 118] 

mm^m 1 <*>*&*) „ _ 

*fc MAI 1 0 0WV>T, jELv>»*«|KSA*iR»LTV^»tW^ Hff-3"ffc»K 
EMB*«^kLt:ftKBtflStf»t?*«:V^ie> % MB 1 2 0 0 t ##Lfc#»flSffiF#JB 

Jstfif'-^tt-lMto&'-CSarV*. tfe, *#B 1 2 0 0 tra«K, iEU^iKSB* 
«^L-CV^tttLtf, Bff^kftKEMAfrtK^fcLtrttKASr^-Ciftv^*, MA 

o *<D1z*>. XTVfS 1 1 8 0f-**W^*4^ EKiKAlfctt, ttKB 
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e>«W"ffc*KE MB. KEMA*2I0*UJ:PJ:^ ^IfiJOSwE^S^ 
10 119] 

±EKRWLfe*lfc«!)»»tt. ^ffcE^fco-WT?*^ «H±uOil^fli: 
[0 12 0] 

(1) «SA1 1 0 OXlTttSB 1 2 OOHaVf^f-^*!)^^ 
— ^ 01 A 1 1 0 0©*5&»&=»2'^>y7 r -* r *2&* fc u *» iv> » 

[0121] 

(2) ****** Lfctk to:3>fV7f-nifLtv^^ fii^^a 
. •»«>** (**»*«*, Mis«i^tfi«^) «w 

[0122] 

[0 12 3] ^ . 

[0124] 

(5) 1E§S«C e r t __A*3tH*K P A fc*«Hr S i g 
(KSC, KPA) tLtv^^ ^tuc^-^ flflx.^ ID«**#ftlU-C«>J:v» 

[0 12 5] 

(6) »oMi-eti, **ft^»«T^ifr4*aiiiWffl**«iKsk<i#^y 

&v> 0 iKAtiKB^M«ffS^-r>aI»-lii:UUv>o 

[gH-hOfUffl"^^] 
[0126J 

d*Lfbtf>#j£KJ:&^ «*^-fe^*-^A, *»*Hrs-fc*ft^y->*.HIfe*fli 
v^itcif), £^tt*«fE-c§. 3L*^-ei»^fl:**3feO*^ BiE** 
**H^-C#, iilf, 3:,^yyf»-**»£«1-*Mfc*fr*«8* fc k-t*ffl 

lgimofig#*^] 

[hi] *&wK&2>im<Dmmvfcmt frwutiflyxfA i o o o<dbj&* 

[H2] H*a^*>^fA 10 0 o^>tt^*^i-^a-^^- b 

[H3] Bg-^iHt^x A 1 0 0 OcDWlftZTF-fyv-fr- h 
[H4] ^^]-eabi»DTCPWMiE^**^^i&^7 n -ia 

I^-t^mW] 
[0 12 8] 

1 0 0 0 flTtjUI^T-A 

110 0 «SA 

1101, 12 0 1 •T-^MSP 
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1102, 1202 mmu 

1103, 1203 ^mu 

1 1 0 4, 1 2 0 4 liE^#^iIEfl5 

1105, 1205 mmmfeffiM 

1106, 1206 Sg3§rikM£.J&U 



1 1 0 7, 1 2 0 7 

1 1 0 8, 1 2 0 8 &^m!kl&M 

1109, 1209 &mm&mu 

1110, 1210 Rf -SHtSB 

1111, 12 11 U^itU 
12 0 0 
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S201 :Cert_B,cB(? 1 -VU'>i?) 

S202:Cert B 



S203 : Cert_A, cA (^A»U>->) 
S205:kA*G*fHt 

S206:**SASH1eJ* S207 : cB» kA*G > SA 



S211 :cA.kB*G»SB 
^ 




B 



S204:Cert_A£g!iiE 



S208:SA£&IiE 

S209:kB*G$S+Kt 

S210:««SB£ffr« 



S212:SB*ttSE 

S21 4 :kA*(kB*G)*It* S21 3:kB«(kA*G)*fM* 
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LJ BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 

□ FADED TEXT OR DRAWING 

□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRAY SCALE DOCUMENTS 

□ LINES OR MARKS ON ORIGINAL DOCUMENT 

□ REFERENCED) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 



BEST AVAILABLE IMAGES 




